<?php
// +----------------------------------------------------------------------
// | ThinkPHP [ WE CAN DO IT JUST THINK IT ]
// +----------------------------------------------------------------------
// | Copyright (c) 2009 http://thinkphp.cn All rights reserved.
// +----------------------------------------------------------------------
// | Licensed ( http://www.apache.org/licenses/LICENSE-2.0 )
// +----------------------------------------------------------------------
// | Author: liu21st <liu21st@gmail.com>
// +----------------------------------------------------------------------

class PublicAction extends Action {
	// 检查用户是否登录

	protected function checkUser() {
		if(!isset($_SESSION[C('USER_AUTH_KEY')])) {
			$this->assign('jumpUrl','Public/login');
			$this->error('没有登录');
		}
	}

	// 顶部页面
	public function top() {
		C('SHOW_RUN_TIME',false);			// 运行时间显示
		C('SHOW_PAGE_TRACE',false);
		$model	=	M("Group");
		$list	=	$model->where('status=1')->getField('id,title');
                                        F('Group',$list);
		$this->assign('nodeGroupList',$list);
		$this->display();
	}
	// 尾部页面
	public function footer() {
		C('SHOW_RUN_TIME',false);			// 运行时间显示
		C('SHOW_PAGE_TRACE',false);
		$this->display();
	}
	// 菜单页面
	public function menu() {
        $this->checkUser();
                        $gid=$_GET['tag'];
                $model   =   M("Group");
	$groups	=$model->where('status=1 AND id='.$gid)->field('id,title')->find()  ;  
        if(isset($_SESSION[C('USER_AUTH_KEY')])) {
            //显示菜单项
            $menu  = array();
            if(isset($_SESSION['menu'.$_SESSION[C('USER_AUTH_KEY')]])) {

                //如果已经缓存，直接读取缓存
                $menu   =   $_SESSION['menu'.$_SESSION[C('USER_AUTH_KEY')]];
            }else {
     /*           //读取数据库模块列表生成菜单项
                $node    =   M("Node");
				$id	=	$node->getField("id");
				$where['level']=2;
				$where['status']=1;
				$where['pid']=$id;
                $list	=	$node->where($where)->field('id,name,group_id,title')->order('sort asc')->select();
                
                $accessList = $_SESSION['_ACCESS_LIST'];
                foreach($list as $key=>$module) {
                     if(isset($accessList[strtoupper(APP_NAME)][strtoupper($module['name'])]) || $_SESSION['administrator']) {
                        //设置模块访问权限
                        $module['access'] =   1;
                        $menu[$key]  = $module;
                    }
                }
                //缓存菜单访问
               //$_SESSION['menu'.$_SESSION[C('USER_AUTH_KEY')]]	=	$menu;
      * 
      */

      
        
                $node    =   D("MenunodeView");
		$id	=   0;	//$node->getField("id");
		$where['menu.level']=1;
		$where['status']=1;
		$where['pid']=$id;
                $list	=	$node->where($where)->field('id,name,groupid,menuname,pid')->order('sort asc')->select();
                
                $accessList = $_SESSION['_ACCESS_LIST'];
                foreach($list as $key=>$module) {
                     if(isset($accessList[strtoupper(APP_NAME)][strtoupper($module['name'])]) || $_SESSION['administrator']) {
                        //设置模块访问权限
                        $module['access'] =   1;
                        $menu[$key]  = $module;
                    }
                }
                //二级菜单操作；

                $node    =   D("MenunodeView");
		//$id	=   0;	//$node->getField("id");
		$whereOne['menu.level']=2;
		$whereOne['status']=1;
                $list	=	$node->where($whereOne)->field('id,name,groupid,menuname,pid')->order('sort asc')->select();
                 foreach($list as $key=>$module) {
                     if(isset($accessList[strtoupper(APP_NAME)][strtoupper($module['name'])]) || $_SESSION['administrator']) {
                        //设置模块访问权限
                        $module['access'] =   1;
                        foreach( $menu as $p=>$mmenu) {
                                if($mmenu['id']== $module['pid']){
                                    $menu[$p]['childmenu'][$key]= $module;
                                }
                        }
                       // $menu[$key]  = $module;
                    }
                }
                //缓存菜单访问
               $_SESSION['menu'.$_SESSION[C('USER_AUTH_KEY')]]	=	$menu;  
            }
           if(!empty($_GET['tag'])){
                $this->assign('menuTag',$_GET['tag']);
            }
			//dump($menu);
          
             $this->assign('menu',$menu);
		}
		C('SHOW_RUN_TIME',false);			// 运行时间显示
		C('SHOW_PAGE_TRACE',false);
                  $this->assign('groups',$groups);
		$this->display();
	}

        
        
    // 后台首页 查看系统信息
    public function main() {
        $gid=$_GET['tag'];
           if (!empty($gid)){
                 $this->assign('tag',$gid);
                 switch($gid)  {
                        case 0:
                           
                            $this->display('main');
                        break;
                        case 1:
                              $this->display('main_'.$gid);
                        break;
                         case 2:
                              $this->display('main_'.$gid);
                        break;
                        case 3:
                              $this->display('main_'.$gid);
                        break;
                       case 4:
                              $this->display('main_'.$gid);
                        break;
                    default :
                            $this->display('main');
                        break;
                     
                 }
                
         
           }else{
               $this->display('main');
               
           }
        

    }

	// 用户登录页面
	public function login() {
		if(!isset($_SESSION[C('USER_AUTH_KEY')])) {
			//$this->redirect('Index/index');
                        $this->display();
		}else{
			//echo('window.opener=null;window.close();window.open (\'Index/index\', \'newwindow\', \'height=600, width=750, toolbar=no, menubar=no, scrollbars=no, resizable=yes, location=no, status=yes,left=250,top=250\');'); //在没有提示的状态下，关闭当前窗口
		
		//
			//$this->redirect('Index/index');
		}
	}

	public function index()
	{
		//如果通过认证跳转到首页
		redirect(__APP__);
                //C('SHOW_RUN_TIME',false);			// 运行时间显示
		//C('SHOW_PAGE_TRACE',false);
		//$model	=	M("Group");
		//$list	=	$model->where('status=1')->getField('id,title');
		//$this->assign('nodeGroupList',$list);
		//$this->display();        

	}

	// 用户登出
    public function logout()
    {
        if(isset($_SESSION[C('USER_AUTH_KEY')])) {
			unset($_SESSION[C('USER_AUTH_KEY')]);
			unset($_SESSION);
			session_destroy();
            $this->assign("jumpUrl",__URL__.'/login/');
            $this->success('登出成功！');
        }else {
            $this->error('已经登出！');
        }
    }

	// 登录检测
	public function checkLogin() {
		if(empty($_POST['account'])) {
			$this->error('帐号错误！');
		}elseif (empty($_POST['password'])){
			$this->error('密码必须！');
		}
		//elseif (empty($_POST['verify'])){
		//	$this->error('验证码必须！');
		//}
        //生成认证条件
        $map            =   array();
		// 支持使用绑定帐号登录
		$map['account']	= $_POST['account'];
        $map["status"]	=	array('gt',0);
		//if($_SESSION['verify'] != md5($_POST['verify'])) {
		//	$this->error('验证码错误！');
		//}
		import ( '@.ORG.Util.RBAC' );
        $authInfo = RBAC::authenticate($map);
        //使用用户名、密码和状态的方式进行认证
        if(false === $authInfo) {
            $this->error('帐号不存在或已禁用！');
        }else {
            if($authInfo['password'] != md5($_POST['password'])) {
            	$this->error('密码错误！');
            }
            $_SESSION[C('USER_AUTH_KEY')]	=	$authInfo['id'];
            $_SESSION['email']	=	$authInfo['email'];
            $_SESSION['loginUserName']		=	$authInfo['nickname'];
            $_SESSION['lastLoginTime']		=	$authInfo['last_login_time'];
			$_SESSION['login_count']	=	$authInfo['login_count'];
            if($authInfo['account']=='admin') {
            	$_SESSION['administrator']		=	true;
            }
            //保存登录信息
			$User	=	M('User');
			$ip		=	get_client_ip();
			$time	=	time();
            $data = array();
			$data['id']	=	$authInfo['id'];
			$data['last_login_time']	=	$time;
			$data['login_count']	=	array('exp','login_count+1');
			$data['last_login_ip']	=	$ip;
			$User->save($data);

			// 缓存访问权限
            RBAC::saveAccessList();
			$this->success('登录成功！');

		}
	}
    // 更换密码
    public function changePwd()
    {
		$this->checkUser();
        //对表单提交处理进行处理或者增加非表单数据
		//if(md5($_POST['verify'])	!= $_SESSION['verify']) {
		//	$this->error('验证码错误！');
		//}
		$map	=	array();
        $map['password']= pwdHash($_POST['oldpassword']);
        if(isset($_POST['account'])) {
            $map['account']	 =	 $_POST['account'];
        }elseif(isset($_SESSION[C('USER_AUTH_KEY')])) {
            $map['id']		=	$_SESSION[C('USER_AUTH_KEY')];
        }
        //检查用户
        $User    =   M("User");
        if(!$User->where($map)->field('id')->find()) {
            $this->error('旧密码不符或者用户名错误！');
        }else {
			$User->password	=	pwdHash($_POST['password']);
			$User->save();
			$this->success('密码修改成功！');
         }
    }
public function profile() {
		$this->checkUser();
		$User	 =	 M("User");
		$vo	=	$User->getById($_SESSION[C('USER_AUTH_KEY')]);
		$this->assign('vo',$vo);
		$this->display();
	}
	 public function verify()
    {
		$type	 =	 isset($_GET['type'])?$_GET['type']:'gif';
        import("@.ORG.Util.Image");
        Image::buildImageVerify(4,1,$type);
    }
// 修改资料
	public function change() {
		$this->checkUser();
		$User	 =	 D("User");
		if(!$User->create()) {
			$this->error($User->getError());
		}
		$result	=	$User->save();
		if(false !== $result) {
			$this->success('资料修改成功！');
		}else{
			$this->error('资料修改失败!');
		}
	}
	//生成区域列表
	public function zonelist(){
	$zone =M("Zone");
	$id	=	$zone->getField("id");
	$where['status']=1;
	$where['pid']=$id;
    $list	=	$zone->where($where)->field('id,name,status,pid')->order('sort asc')->select();
} 

public function frame() {
           $gid=$_GET['tag'];
           if (!empty($gid)){
           $this->assign('tag',$gid);
                $this->display();
         
           }else{
                 //$biz=D("BizManage");
                 // $biz->cacheBiz() ;
               $Data = F('bizcount');
               $this->assign('count',$Data);
               $this->display('main');
               
           }
          
          
}



}

?>